2f5e81a840ad3f65ebfb3a43472cc569_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2f5e81a840ad3f65ebfb3a43472cc569_JaffaCakes118
Size

756KB
MD5

2f5e81a840ad3f65ebfb3a43472cc569
SHA1

18985df9c8c6800dd0b423cba62d13d4b426c835
SHA256

6d017c561d9b3a4e56756e48452549f8d3b4882a7fc225fed900d876a624fbe0
SHA512

76a0a1088db2b9f4feeb7a87d59254795c6f050dc5276675fd809d61d9e50b9749896f936f563988816397370b49d9a734ec04dc61e4c85ee8fdef74d65271b7
SSDEEP

12288:cZfukuBecSegHwPkTKEYc6Hr5+ZXrIm7yYlQFCkBcbTn7777779:cZGZZdPkeEYPr56MYyAvgGh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2f5e81a840ad3f65ebfb3a43472cc569_JaffaCakes118

Files

2f5e81a840ad3f65ebfb3a43472cc569_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 632KB - Virtual size: 632KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 5KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 20B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ